Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Ai Intelligent Customer Segmentation

v1.0.0

客户分层,RFM分析 + 精准营销。

0· 95·0 current·0 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for yang1002378395-cmyk/ai-customer-segment.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Ai Intelligent Customer Segmentation" (yang1002378395-cmyk/ai-customer-segment) from ClawHub.
Skill page: https://clawhub.ai/yang1002378395-cmyk/ai-customer-segment
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install ai-customer-segment

ClawHub CLI

Package manager switcher

npx clawhub@latest install ai-customer-segment
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
Name/description (RFM/customer segmentation) align with the features listed. However, the skill package contains no code and no homepage; the SKILL.md instructs cloning a separate GitHub repository to obtain the implementation, which is a mismatch between the distributed skill and the runtime footprint the skill asks you to run.
!
Instruction Scope
SKILL.md directs the operator to run: git clone https://github.com/openclaw-skills/ai-intelligent-customer-segmentation; pip install -r requirements.txt; python app.py — i.e., download and execute code from an external repo. The instructions do not declare what the repo contains, what network endpoints it contacts, or what credentials/config it will require. That broad instruction to fetch and execute external code is outside the minimal expectations for an instruction-only skill.
!
Install Mechanism
There is no install spec in the package itself; instead SKILL.md instructs cloning a GitHub repo and installing requirements. While GitHub is a known host, the repo is not included in the skill bundle and has not been reviewed here. This effectively delegates install/execution to an external, unvetted codebase (potential for arbitrary code execution).
Credentials
The skill declares no required environment variables or credentials, but the external app it asks you to run may require DB connections, API keys, SMTP, or other secrets not declared. The lack of declared env requirements is therefore incomplete and could lead users to supply credentials without proper justification.
Persistence & Privilege
The skill is not marked always:true and does not request elevated persistence. It is user-invocable and allows model invocation (defaults), which is normal. There is no evidence in the package of attempts to modify other skills or system-wide settings.
What to consider before installing
This skill's description is reasonable, but it contains no code and instructs you to git-clone and run an external GitHub project. Cloning and running that repository will execute unreviewed code on your machine and may require or request credentials. Before installing or running it: (1) review the GitHub repo contents (requirements.txt, app.py, README) to confirm behavior and network endpoints; (2) run in a disposable/isolated environment (container or VM); (3) do not provide secrets (DB passwords, API keys) until you verify why they are needed; (4) prefer skills that bundle audited code or use official package releases; (5) if unsure, ask the publisher for provenance or a packaged release before proceeding.

Like a lobster shell, security has layers — review code before you run it.

Runtime requirements

🤖 Clawdis
aivk977rq0xfj29sg19k43bnt77x983t0falatestvk977rq0xfj29sg19k43bnt77x983t0famarketingvk977rq0xfj29sg19k43bnt77x983t0fa
95downloads
0stars
1versions
Updated 4w ago
v1.0.0
MIT-0

AI 智能客户分层系统

描述

客户分层,RFM分析 + 精准营销。

功能

  • RFM 分析(自动分层)
  • 标签管理(客户标签)
  • 画像分析(客户画像)
  • 营销策略(分层策略)
  • 效果跟踪(转化跟踪)

定价

  • 基础版:¥199/月(1 万客户)
  • 专业版:¥999/月(10 万客户)
  • 企业版:¥2999/月(无限客户)

适用场景

  • 客户管理
  • 精准营销
  • CRM 系统
  • 用户运营

技术栈

  • Python + FastAPI
  • RFM 分析
  • 标签系统
  • 营销策略

安装

git clone https://github.com/openclaw-skills/ai-intelligent-customer-segmentation
cd ai-intelligent-customer-segmentation
pip install -r requirements.txt
python app.py

创建:2026-03-13 作者:OpenClaw Skills Team

Comments

Loading comments...